uvm_fault(0xffffffff83a60260, 0xffff800029ef6000, 0, 2) -> e kernel: page fault trap, code=2 Stopped at kcov_remote_enter+0x122: movq $0,0(%rcx) TID PID UID PRFLAGS PFLAGS CPU COMMAND *196324 70281 0 0x1000 0x4080000 0 syz-executor kcov_remote_enter(0,ffff80002a7a0490) at kcov_remote_enter+0x122 sys/dev/kcov.c:670 timeout_run(ffffffff8383a1c0,ffff80002a7865d8) at timeout_run+0xdf sys/kern/kern_timeout.c:696 softclock_process_tick_timeout(ffff80002a7865d8,0) at softclock_process_tick_timeout+0x230 sys/kern/kern_timeout.c:756 softclock(0) at softclock+0x152 sys/kern/kern_timeout.c:788 softintr_dispatch(0) at softintr_dispatch+0xf9 sys/kern/kern_softintr.c:87 dosoftint(0) at dosoftint+0x48 sys/arch/amd64/amd64/intr.c:862 Xsoftclock() at Xsoftclock+0x27 vinvalbuf(fffffd8066df93b0,2,fffffd8007ffd680,ffff80003c8fcfb8,0,ffffffffffffffff) at vinvalbuf+0x608 sys/kern/vfs_subr.c:2010 ffs_truncate(fffffd807c968800,0,4,fffffd8007ffd680) at ffs_truncate+0xf41 sys/ufs/ffs/ffs_inode.c:-1 ffs_write(ffff80003a0df1c0) at ffs_write+0xb9a sys/ufs/ffs/ffs_vnops.c:401 VOP_WRITE(fffffd8066df93b0,ffff80003a0df378,7,fffffd8007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffffd807d47dd30,ffff80003a0df378,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408 dofilewritev(ffff80003c8fcfb8,3,ffff80003a0df378,0,ffff80003a0df420) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80003c8fcfb8,ffff80003a0df4d0,ffff80003a0df420) at sys_write+0xa2 sys/kern/sys_generic.c:300 end trace frame: 0xffff80003a0df4c0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83a60260, 0xffff800029ef6000, 0, 2) -> e ddb> trace kcov_remote_enter(0,ffff80002a7a0490) at kcov_remote_enter+0x122 sys/dev/kcov.c:670 timeout_run(ffffffff8383a1c0,ffff80002a7865d8) at timeout_run+0xdf sys/kern/kern_timeout.c:696 softclock_process_tick_timeout(ffff80002a7865d8,0) at softclock_process_tick_timeout+0x230 sys/kern/kern_timeout.c:756 softclock(0) at softclock+0x152 sys/kern/kern_timeout.c:788 softintr_dispatch(0) at softintr_dispatch+0xf9 sys/kern/kern_softintr.c:87 dosoftint(0) at dosoftint+0x48 sys/arch/amd64/amd64/intr.c:862 Xsoftclock() at Xsoftclock+0x27 vinvalbuf(fffffd8066df93b0,2,fffffd8007ffd680,ffff80003c8fcfb8,0,ffffffffffffffff) at vinvalbuf+0x608 sys/kern/vfs_subr.c:2010 ffs_truncate(fffffd807c968800,0,4,fffffd8007ffd680) at ffs_truncate+0xf41 sys/ufs/ffs/ffs_inode.c:-1 ffs_write(ffff80003a0df1c0) at ffs_write+0xb9a sys/ufs/ffs/ffs_vnops.c:401 VOP_WRITE(fffffd8066df93b0,ffff80003a0df378,7,fffffd8007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffffd807d47dd30,ffff80003a0df378,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408 dofilewritev(ffff80003c8fcfb8,3,ffff80003a0df378,0,ffff80003a0df420) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80003c8fcfb8,ffff80003a0df4d0,ffff80003a0df420) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003a0df4d0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a0df4d0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9d5f1ab9300, count: -16 ddb> show registers rdi 0xffffffff rsi 0xffff800000c16c00 rbp 0xffff80003a0dec40 rbx 0xffff80002a7a0490 rdx 0xffff80003c8fcfb8 rcx 0xffff800029ef6000 rax 0xfffffd806ccf5f60 r8 0 r9 0xffffffffffffffff r10 0xcc5d9212d47f19d r11 0x698a0793face40cc r12 0xffffffff831975c0 endtsleep r13 0xffff80002a786540 r14 0xffff80002a7a0490 r15 0 rip 0xffffffff82aac692 kcov_remote_enter+0x122 cs 0x8 rflags 0x10297 __ALIGN_SIZE+0xf297 rsp 0xffff80003a0dec20 ss 0x10 kcov_remote_enter+0x122: movq $0,0(%rcx) ddb> show proc PROC (syz-executor) tid=196324 pid=70281 tcnt=4 stat=onproc flags process=1000 proc=4080000 runpri=17, usrpri=75, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c8fda18 scnt=3 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c8fda18,0xffff80003c8fdcc0 process=0xffff8000ffff9218 user=0xffff80003a0da000, vmspace=0xfffffd807c9582f0 estcpu=25, cpticks=3, pctcpu=0.1, user=0, sys=2, intr=1 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 86348 413355 61616 0 2 0 syz-executor 86348 498950 61616 0 3 0x4000080 pipewr syz-executor 18368 134985 69974 0 2 0 syz-executor 18368 470605 69974 0 3 0x4000080 fsleep syz-executor 18368 510981 69974 0 3 0x4000080 fsleep syz-executor 12908 19818 92221 0 2 0 syz-executor 12908 513543 92221 0 2 0x4000000 syz-executor 83604 161937 11262 0 2 0 syz-executor 83604 388251 11262 0 3 0x4000080 piperd syz-executor 58163 397934 53685 0 2 0 syz-executor 58163 447948 53685 0 3 0x4000080 fsleep syz-executor 58163 132740 53685 0 3 0x4000080 fsleep syz-executor 58163 268753 53685 0 3 0x4000080 fsleep syz-executor 10209 376563 84679 60928 3 0x90 nanoslp syz-executor 10209 277966 84679 60928 3 0x4000090 kqread syz-executor 10209 486376 84679 60928 3 0x4000090 fsleep syz-executor 42826 163422 89601 0 3 0x80 nanoslp syz-executor 42826 348147 89601 0 3 0x4000080 pipewr syz-executor 42826 422428 89601 0 3 0x4000080 fsleep syz-executor 70281 387902 81837 0 3 0x3000 suspend syz-executor *70281 196324 81837 0 7 0x4081000 syz-executor 70281 354694 81837 0 3 0x4081000 inode syz-executor 70281 446630 81837 0 3 0x4081000 inode syz-executor 92221 188386 63158 0 3 0x82 nanoslp syz-executor 69974 180735 63158 0 3 0x82 nanoslp syz-executor 53685 30017 63158 0 3 0x82 nanoslp syz-executor 11262 14606 63158 0 3 0x82 nanoslp syz-executor 81837 444775 63158 0 3 0x82 nanoslp syz-executor 89601 295533 63158 0 3 0x82 nanoslp syz-executor 61616 348834 63158 0 3 0x82 nanoslp syz-executor 84679 149231 63158 0 3 0x82 nanoslp syz-executor 63158 338095 48736 0 3 0x82 kqread syz-executor 48736 394924 96256 0 3 0x10008a sigsusp ksh 96256 174253 12069 0 3 0x98 kqread sshd-session 12069 307011 78211 0 3 0x92 kqread sshd-session 36070 377648 1 0 3 0x100083 ttyopn getty 78211 222074 1 0 3 0x88 kqread sshd 11394 74572 87913 73 3 0x1100090 kqread syslogd 87913 9018 1 0 3 0x100082 sbwait syslogd 7177 168237 1 0 3 0x100080 kqread resolvd 64887 73678 81383 77 3 0x100092 kqread dhcpleased 50297 439309 81383 77 3 0x100092 kqread dhcpleased 81383 35345 1 0 3 0x80 kqread dhcpleased 55660 428768 0 0 3 0x14200 bored smr 30752 146984 0 0 2 0x14200 zerothread 9850 172859 0 0 3 0x14200 aiodoned aiodoned 46079 168684 0 0 3 0x14200 syncer update 79803 474893 0 0 3 0x14200 cleaner cleaner 19580 110156 0 0 3 0x14200 reaper reaper 77780 264762 0 0 3 0x14200 pgdaemon pagedaemon 19766 341556 0 0 3 0x14200 bored viomb 91222 107371 0 0 3 0x40014200 acpi0 acpi0 57919 350305 0 0 3 0x14200 bored softnet0 42773 223947 0 0 3 0x14200 bored systqmp 87522 16228 0 0 3 0x14200 bored systq 23822 110087 0 0 3 0x40014200 tmoslp softclock 83392 55473 0 0 3 0x40014200 idle0 1 362993 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11049 12128K 12639K 166960K 12776 0 pcb 19 14K 16K 166960K 168 0 rtable 238 16K 16K 166960K 470 0 pf 36 14K 18K 166960K 103 0 ifaddr 41 7K 8K 166960K 78 0 ifgroup 56 2K 2K 166960K 124 0 sysctl 3 1K 9K 166960K 9 0 counters 36 18K 18K 166960K 100 0 ioctlops 0 0K 4K 166960K 220 0 iov 0 0K 12K 166960K 18 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1369 86K 86K 166960K 1875 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 54 0 dirhash 12 2K 2K 166960K 27 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 543 0 sigio 0 0K 0K 166960K 8 0 proc 60 59K 83K 166960K 543 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 39 0 in_multi 88 6K 7K 166960K 127 0 ether_multi 1 0K 0K 166960K 7 0 mrt 0 0K 0K 166960K 18 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 416 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 232 151K 168K 166960K 6440 0 UVM aobj 16 2K 2K 166960K 18 0 pinsyscall 39 78K 92K 166960K 1634 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 38 0 NDP 13 0K 2K 166960K 50 0 temp 48 9068K 9132K 166960K 13180 0 kqueue 16 26K 33K 166960K 125 0 SYN cache 2 8K 16K 166960K 3 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 123 0 120 3 2 1 3 0 8 0 rtentry 136 130 0 29 4 0 4 4 0 8 0 unpcb 144 828 0 812 6 5 1 6 0 8 0 syncache 336 7 0 7 1 1 0 1 0 8 0 tcpcb 736 251 0 247 7 6 1 7 0 8 0 arp 96 22 0 5 1 0 1 1 0 8 0 ipq 40 6 0 1 1 0 1 1 0 8 0 ipqe 40 71 0 66 1 0 1 1 0 8 0 inpcb 328 641 0 630 12 5 7 12 0 8 5 ip6q 72 1 0 1 1 1 0 1 0 8 0 ip6af 40 2 0 2 1 1 0 1 0 8 0 nd6 112 26 0 4 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 1 0 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 56 0 54 2 1 1 1 0 8 0 pppxif 1416 7 0 7 1 1 0 1 0 8 0 pfstscr 40 2 0 2 1 1 0 1 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfsrclim 320 1 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfqueue 320 1 0 1 1 1 0 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 8 0 6 1 0 1 1 0 8 0 pfstate 384 5 0 3 1 0 1 1 0 8 0 pfrule 1360 6 0 6 1 1 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 499 0 83 29 2 27 29 0 8 0 art_table 40 500 0 83 5 0 5 5 0 8 0 art_node 32 128 0 36 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 2 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 51 0 41 1 0 1 1 0 8 0 shmpl 112 15 0 2 1 0 1 1 0 8 0 dirhash 1024 27 0 10 3 0 3 3 0 8 0 dino2pl 256 2449 0 992 92 0 92 92 0 8 0 ffsino 256 2449 0 992 92 0 92 92 0 8 0 nchpl 144 3208 0 1509 64 0 64 64 0 8 0 rtmask 32 4 0 3 2 1 1 1 0 8 0 vnodes 216 2799 0 0 156 0 156 156 0 8 0 namei 1024 10751 0 10750 2 1 1 2 0 8 0 kstatmem 264 68 0 42 3 1 2 3 0 8 0 acpiwqpl 32 2 0 2 1 0 1 1 1 8 1 scsiplug 72 3 0 3 1 1 0 1 0 8 0 scxspl 216 16528 0 16528 8 7 1 8 1 8 1 plimitpl 152 279 0 260 1 0 1 1 0 8 0 sigapl 424 826 0 783 6 0 6 6 0 8 0 knotepl 120 16533 0 16472 9 7 2 9 0 8 0 kqueuepl 184 231 0 217 3 0 3 3 0 8 2 pipepl 304 152 0 122 3 0 3 3 0 8 0 fdescpl 448 812 0 782 5 1 4 5 0 8 0 filepl 120 5284 0 5058 14 2 12 14 0 8 4 lockfpl 104 216 0 214 1 0 1 1 0 8 0 lockfspl 48 103 0 101 1 0 1 1 0 8 0 sessionpl 144 37 0 28 1 0 1 1 0 8 0 pgrppl 48 47 0 30 1 0 1 1 0 8 0 ucredpl 104 745 0 733 1 0 1 1 0 8 0 zombiepl 144 784 0 783 1 0 1 1 0 8 0 processpl 1152 826 0 783 4 0 4 4 0 8 0 procpl 664 1469 0 1411 6 0 6 6 0 8 0 sosppl 176 2 0 2 1 1 0 1 0 8 0 sockpl 552 1613 0 1583 17 9 8 17 0 8 5 mcl64k 65536 18 0 18 2 1 1 1 0 8 1 mcl16k 16384 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 43 0 43 1 1 0 1 0 8 0 mcl4k 4096 3066 0 3010 16 8 8 16 0 8 0 mcl2k 2048 822 0 822 2 1 1 1 0 8 1 mtagpl 96 22 0 9 1 0 1 1 0 8 0 mbufpl 256 9043 0 8845 18 4 14 18 0 8 0 bufpl 280 6268 0 109 440 0 440 440 0 8 0 anonpl 24 163130 0 156431 66 21 45 66 0 187 0 amapchunkpl 152 21662 0 21162 35 14 21 35 0 158 1 amappl16 200 3550 0 3307 37 24 13 24 0 8 0 amappl15 192 18 0 18 1 1 0 1 0 8 0 amappl14 184 411 0 410 1 0 1 1 0 8 0 amappl13 176 157 0 146 1 0 1 1 0 8 0 amappl12 168 1054 0 1025 2 0 2 2 0 8 0 amappl11 160 45 0 45 1 1 0 1 0 8 0 amappl10 152 62 0 52 1 0 1 1 0 8 0 amappl9 144 255 0 255 1 1 0 1 0 8 0 amappl8 136 100 0 99 1 0 1 1 0 8 0 amappl7 128 144 0 132 1 0 1 1 0 8 0 amappl6 120 149 0 147 1 0 1 1 0 8 0 amappl5 112 105 0 96 1 0 1 1 0 8 0 amappl4 104 266 0 251 1 0 1 1 0 8 0 amappl3 96 4026 0 3913 4 0 4 4 0 8 0 amappl2 88 530 0 476 2 0 2 2 0 8 0 amappl1 80 11706 0 11158 15 1 14 15 0 8 1 amappl 88 5675 0 5505 5 0 5 5 0 92 0 uvmvnodes 80 117 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 44 0 43 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 17 0 2 1 0 1 1 0 8 0 uaddrrnd 24 812 0 782 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 812 0 782 1 0 1 1 0 8 0 vmmpekpl 168 8153 0 8114 2 0 2 2 0 8 0 vmmpepl 168 60544 0 58494 100 5 95 100 0 357 0 vmsppl 368 811 0 782 4 1 3 4 0 8 0 rwobjpl 40 19960 0 18767 15 0 15 15 0 8 0 pdppl 4096 1630 0 1564 108 42 66 80 0 8 0 pvpl 32 394443 0 381861 150 32 118 150 0 265 2 pmappl 216 811 0 782 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 389 0 74 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace kcov_remote_enter(0,ffff80002a7a0490) at kcov_remote_enter+0x122 sys/dev/kcov.c:670 timeout_run(ffffffff8383a1c0,ffff80002a7865d8) at timeout_run+0xdf sys/kern/kern_timeout.c:696 softclock_process_tick_timeout(ffff80002a7865d8,0) at softclock_process_tick_timeout+0x230 sys/kern/kern_timeout.c:756 softclock(0) at softclock+0x152 sys/kern/kern_timeout.c:788 softintr_dispatch(0) at softintr_dispatch+0xf9 sys/kern/kern_softintr.c:87 dosoftint(0) at dosoftint+0x48 sys/arch/amd64/amd64/intr.c:862 Xsoftclock() at Xsoftclock+0x27 vinvalbuf(fffffd8066df93b0,2,fffffd8007ffd680,ffff80003c8fcfb8,0,ffffffffffffffff) at vinvalbuf+0x608 sys/kern/vfs_subr.c:2010 ffs_truncate(fffffd807c968800,0,4,fffffd8007ffd680) at ffs_truncate+0xf41 sys/ufs/ffs/ffs_inode.c:-1 ffs_write(ffff80003a0df1c0) at ffs_write+0xb9a sys/ufs/ffs/ffs_vnops.c:401 VOP_WRITE(fffffd8066df93b0,ffff80003a0df378,7,fffffd8007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffffd807d47dd30,ffff80003a0df378,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408 dofilewritev(ffff80003c8fcfb8,3,ffff80003a0df378,0,ffff80003a0df420) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80003c8fcfb8,ffff80003a0df4d0,ffff80003a0df420) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003a0df4d0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a0df4d0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9d5f1ab9300, count: -16 ddb> machine ddbcpu 1 No such command ddb> trace kcov_remote_enter(0,ffff80002a7a0490) at kcov_remote_enter+0x122 sys/dev/kcov.c:670 timeout_run(ffffffff8383a1c0,ffff80002a7865d8) at timeout_run+0xdf sys/kern/kern_timeout.c:696 softclock_process_tick_timeout(ffff80002a7865d8,0) at softclock_process_tick_timeout+0x230 sys/kern/kern_timeout.c:756 softclock(0) at softclock+0x152 sys/kern/kern_timeout.c:788 softintr_dispatch(0) at softintr_dispatch+0xf9 sys/kern/kern_softintr.c:87 dosoftint(0) at dosoftint+0x48 sys/arch/amd64/amd64/intr.c:862 Xsoftclock() at Xsoftclock+0x27 vinvalbuf(fffffd8066df93b0,2,fffffd8007ffd680,ffff80003c8fcfb8,0,ffffffffffffffff) at vinvalbuf+0x608 sys/kern/vfs_subr.c:2010 ffs_truncate(fffffd807c968800,0,4,fffffd8007ffd680) at ffs_truncate+0xf41 sys/ufs/ffs/ffs_inode.c:-1 ffs_write(ffff80003a0df1c0) at ffs_write+0xb9a sys/ufs/ffs/ffs_vnops.c:401 VOP_WRITE(fffffd8066df93b0,ffff80003a0df378,7,fffffd8007ffd680) at VOP_WRITE+0x101 sys/kern/vfs_vops.c:245 vn_write(fffffd807d47dd30,ffff80003a0df378,0) at vn_write+0x1c2 sys/kern/vfs_vnops.c:408 dofilewritev(ffff80003c8fcfb8,3,ffff80003a0df378,0,ffff80003a0df420) at dofilewritev+0x2bd sys/kern/sys_generic.c:384 sys_write(ffff80003c8fcfb8,ffff80003a0df4d0,ffff80003a0df420) at sys_write+0xa2 sys/kern/sys_generic.c:300 syscall(ffff80003a0df4d0) at syscall+0x962 mi_syscall sys/sys/syscall_mi.h:-1 [inline] syscall(ffff80003a0df4d0) at syscall+0x962 sys/arch/amd64/amd64/trap.c:783 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9d5f1ab9300, count: -16